Senior Cyber Security Specialist

Our Story: It's no surprise that our story is a little unconventional. After all, Papa Murphy's brought an entirely new approach to the pizza industry. But our unique idea is a simple one. We focus on using quality ingredients, prepared fresh daily, to offer our guests everyday meal solutions to take 'n' bake at home with ease. That commitment to quality and creativity extends beyond just our delicious and craveable products. At Papa Murphy's it is our mission to create a culture of collaboration, accountability, and inclusion. Because we know that what makes us great isn't just what we make, it's what we make together.

Reporting directly to the Senior Manager of SecuOur Story: It's no surprise that our story is a little unconventional. After all, Papa Murphy's brought an entirely new approach to the pizza industry. But our unique idea is a simple one. We focus on using quality ingredients, prepared fresh daily, to offer our guests everyday meal solutions to take 'n' bake at home with ease. That commitment to quality and creativity extends beyond just our delicious and craveable products. At Papa Murphy's it is our mission to create a culture of collaboration, accountability, and inclusion. Because we know that what makes us great isn't just what we make, it's what we make together.

Reporting directly to the Senior Manager of Security Operations, the Senior Cybersecurity Specialist (FTE) will be a key contributor to the MTY Global IT team supporting 90+ brands across Canada and the United States. This position will support MTY's Security Operations and Vulnerability Management functions.

This position is being recruited through the Papa Murphy's International subsidiary of MTY Food Group, a publicly traded company listed on the Toronto Stock Exchange ("MTY"). MTY's family of 80+ restaurant brands include mainstays such as Cold Stone Creamery, Famous Dave's, and Papa Murphy's.

Responsibilities

Security Operations

* Proactively hunt for threats in the enterprise environment

* Leverage security technologies (SIEM, EDR, IDS/IPS, NGFW) to identify IOCs or evidence of TTPs

* Collaborate with enterprise IT staff to perform analysis and remediate incidents

* Develop and maintain incident handling procedures and incident response playbooks

* Manage escalations from MSSPs, investigate findings, and bring incidents to resolution

* Lead incident response activities, including mitigation, remediation, root cause analysis, lessons learned, and incident report documentation

* Review open cases and provide follow-up that may be required

* Perform network and host forensics across Windows, Mac, and Linux platforms

Threat Intelligence and Detection

* Aggregate and analyze internal and external threat intelligence to identify relevant risks to the enterprise

* Map threat intelligence to MITRE ATT&CK and integrate findings into detection strategies

* Design and tune detection logic to identify abnormal user and system behavior

* Continuously review and optimize SIEM and EDR alerts to reduce false positives

* Collaborate with MSSPs and internal stakeholders to improve detection coverage and threat visibility

* Monitor dark web, threat feeds, and other sources for indicators of emerging threats affecting MTY's brands and infrastructure

 

Data Loss Prevention (DLP)

* Administer and maintain DLP policies, rules, and monitoring tools

* Investigate DLP incidents and assess the severity of data exposure or exfiltration risks

* Collaborate with legal, HR, and compliance teams on DLP incident handling and response

* Recommend and implement improvements to DLP program controls, classification rules, and policy enforcement

* Educate stakeholders and end users on data handling policies to reduce data leakage risks

Vulnerability Management

* Leverage Exposure Management Technology to monitor and assess the organization's attack surface across cloud, endpoint, and on-prem environments.

* Correlate exposure data with threat intelligence and business context to prioritize remediation efforts based on risk, exploitability, and asset criticality

* Collaborate with technical teams to interpret exposure insights, recommend mit